From owner-freebsd-newbies@FreeBSD.ORG Tue Mar 8 13:51:34 2005 Return-Path: Delivered-To: freebsd-newbies@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A77A616A4CE for ; Tue, 8 Mar 2005 13:51:34 +0000 (GMT) Received: from asclepius.uwa.edu.au (asclepius3.uwa.edu.au [130.95.128.60]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0F60743D31 for ; Tue, 8 Mar 2005 13:51:34 +0000 (GMT) (envelope-from zanchey@mussel.ucc.gu.uwa.edu.au) Received: from asclepius.kas (localhost.localdomain [127.0.0.1]) by asclepius.uwa.edu.au (Postfix) with SMTP id C9361183DC1 for ; Tue, 8 Mar 2005 21:51:32 +0800 (WST) Received: from asclepius (localhost.localdomain [127.0.0.1]) by asclepius.prekas (Postfix) with SMTP id B7852183D3E for ; Tue, 8 Mar 2005 21:51:32 +0800 (WST) X-UWA-Client-IP: 130.95.13.9 (UWA) Received: from mooneye.ucc.gu.uwa.edu.au (mooneye.ucc.gu.uwa.edu.au [130.95.13.9]) by asclepius.input (Postfix) with ESMTP id 9F236183DB7 for ; Tue, 8 Mar 2005 21:51:32 +0800 (WST) Received: by mooneye.ucc.gu.uwa.edu.au (Postfix, from userid 801) id 28E6E17E2D; Tue, 8 Mar 2005 21:51:32 +0800 (WST) Received: from mussel.ucc.gu.uwa.edu.au (mussel.ucc.gu.uwa.edu.au [130.95.13.18]) by mooneye.ucc.gu.uwa.edu.au (Postfix) with ESMTP id AB8FC17E23; Tue, 8 Mar 2005 21:51:31 +0800 (WST) Received: from zanchey (helo=localhost) by mussel.ucc.gu.uwa.edu.au with local-esmtp (Exim 3.36 #1 (Debian)) id 1D8f7T-00016E-00; Tue, 08 Mar 2005 21:51:31 +0800 Date: Tue, 8 Mar 2005 21:51:31 +0800 (WST) From: David Adam To: =?ISO-8859-1?Q?Stian_=D8vrev=E5ge?= In-Reply-To: Message-ID: References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: David Adam X-SpamTest-Info: Profile: Formal (210/050304) X-SpamTest-Info: Profile: Detect Hard [UCS 290904] X-SpamTest-Info: Profile: SysLog X-SpamTest-Info: Profile: Marking Spam - Subject (UCS) [02-08-04] X-SpamTest-Status: Not detected X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0125], KAS/Release cc: freebsd-newbies@freebsd.org Subject: Re: Secure installation and updating X-BeenThere: freebsd-newbies@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Gathering place for new users List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Mar 2005 13:51:34 -0000 Stian, A question this technical really needs to go to freebsd-questions@freebsd.org rather than the newbie discussion list. Having said that: yes, you can download the entire /usr/src tree in a variety of ways. http://www.freebsd.org/support.html#cvs lists a few - you might want to carry a custom-built FreeSBIE (www.freesbie.org) CD with cvsup-without-gui installed on it to use CVS. That also gives you the security of knowing that at least there are no software security breaches on your download system. I would recommend that you don't mount the pen drive as /usr/src, but rather copy all the files (or better yet, a tarball) to /usr/src on your target system. This will probably make things faster/better. If you do mount the pen drive as /usr/src, remember to mark it noatime! (Although there was a post above noting that checksums are used, remember that if you can modify arbitrary traffic, you can modify the checksums too. See dns/dnshijacker and security/ettercap for some interesting insights.) Cheers, David Adam zanchey@ucc.gu.uwa.edu.au